songsee
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONNO_CODEPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
songseebinary via a third-party Homebrew tap (steipete/tap/songsee) hosted on GitHub. - [COMMAND_EXECUTION]: The skill facilitates the execution of the
songseeCLI tool with user-specified arguments and input files. - [NO_CODE]: No local code is included in the skill; all processing is delegated to the external binary.
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface. 1. Ingestion points: Audio files provided to the
songseecommand (SKILL.md). 2. Boundary markers: None. 3. Capability inventory: Command-line execution of a third-party binary. 4. Sanitization: None provided by the skill definition.
Audit Metadata